$network = New-HNSNetwork -Type $Global:NetworkModel -DNSServer "183.69.83.19,183.60.82.98" -AddressPrefix "169.254.255.248/29" -Gateway "169.254.255.249" -Name $NetworkName -Verbose

# if use l2bridge, create a quasi gateway for the containers to use
if ($Global:NetworkModel -eq "L2bridge") {
    # Enable forwarding
    netsh int ipv4 set int "vEthernet (Ethernet)" for=en
    $hnsEndpoint = New-HnsEndpoint -NetworkId $network.ID -Name $endpointName -IPAddress 169.254.255.250 -Verbose 
    Attach-HnsHostEndpoint -EndpointID $hnsEndpoint.Id -CompartmentID 1 
    netsh int ipv4 set int $vnicName for=en
    # add a static ARP entry with a dummy MAC so that traffic is able to leave our host without being stuck waiting for an ARP probe to resolve this gateway IP
    netsh int ipv4 add neighbors $vnicName "169.254.255.249" "00-01-e8-8b-2e-4b"
}

route delete 169.254.0.0
# after create hns network, a route of 169.254.0.0/17 must be added
route add 169.254.0.0 mask 255.255.0.0 $podGW metric 10
route -p add 169.254.0.0 mask 255.255.0.0 169.254.255.249

apiVersion: v1
kind: Node
metadata:
  annotations:
    eks.tke.cloud.tencent.com/subnet-id: $SUBENET # subnet-xxxxxxx
    eks.tke.cloud.tencent.com/zone-id: "$ZONEID" # 数字化的zone id
  labels:
    beta.kubernetes.io/arch: amd64
    beta.kubernetes.io/os: windows
    eks.tke.cloud.tencent.com/subnet-id: $SUBENET # subnet-xxxxxxx
    eks.tke.cloud.tencent.com/version: v2
    eks.tke.cloud.tencent.com/zone-name: ap-$REGION-$ZNOENUMBER # ap-guangzhou-7
    failure-domain.beta.kubernetes.io/region: $REGIONNAME # gz
    failure-domain.beta.kubernetes.io/zone: "$ZONEID" # 数字化的zone id
    kubernetes.io/arch: amd64
    kubernetes.io/hostname: eklet-$SUBENET # subnet-xxxxxxx
    kubernetes.io/os: windows
    node.kubernetes.io/windows-build: '10.0.17763'
    node.kubernetes.io/instance-type: eklet
    topology.com.tencent.cloud.csi.cbs/zone: ap-$REGION-$ZNOENUMBER # ap-guangzhou-7
    topology.kubernetes.io/region: $REGIONNAME # gz
    topology.kubernetes.io/zone: "$ZONEID" # 数字化的zone id
  name: eklet-$SUBENET-win # subnet-xxxxxxx
spec:
  taints:
  - effect: NoSchedule
    key: os
    value: windows

apiVersion: node.k8s.io/v1
handler: runhcs-wcow-process
kind: RuntimeClass
metadata:
  name: windows
scheduling:
  nodeSelector:
    kubernetes.io/arch: amd64
    kubernetes.io/os: windows
  tolerations:
  - effect: NoSchedule
    key: os
    operator: Equal
    value: windows

kind: Pod
apiVersion: v1
metadata:
  name: test-pod-1
spec:
  runtimeClassName: windows
  containers:
    - name: test-container-1
      env:
        - name: MY_NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
      image: mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2019
      ports:  # 为了告知windows cni创建 port-mapping规则，需要显示的写上希望暴露到pod ip上的端口
      - containerPort: 80  
      - containerPort: 443
  restartPolicy: Always

./tkeclient image-cache create --region ap-xxxxxx --secretID XXXXXXX --secretKey XXXXXXX --images mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2019  --name windows-images-cache-01  --os windows --size 100 --subnetID subnet-xxxx --vpcID vpc-xxxx --imageUser xxxxxxxx --imagePasswd xxxxx

apiVersion: storage.k8s.io/v1beta1
kind: CSIDriver
metadata:
  name: smb.csi.k8s.io
spec:
  attachRequired: false
  podInfoOnMount: true

apiVersion: v1
kind: PersistentVolume
metadata:
  name: pv-smb-guest
spec:
  capacity:
    storage: 80Gi
  accessModes:
    - ReadWriteMany
  persistentVolumeReclaimPolicy: Retain
  mountOptions:
    - dir\\_mode=0777
    - file\\_mode=0777
    - vers=3.0
    - guest
  csi:
    driver: smb.csi.k8s.io
    readOnly: false
    volumeHandle: public-108  # make sure it's a unique id in the cluster
    volumeAttributes:
      source: "//192.168.0.108/public"

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: pvc-smb-guest
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 80Gi
  volumeName: pv-smb-guest
  storageClassName: "" # 避免匹配到默认stroageClass

kind: Pod
apiVersion: v1
metadata:
  name: test-pod-2
  annotations:
spec:
  runtimeClassName: windows
  containers:
    - name: test-container-1
      env:
        - name: MY\\_NODE\\_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
      image: mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2019
      ports:
      - containerPort: 80
      - containerPort: 443
      volumeMounts:
      - mountPath: /data
        name: smb
  restartPolicy: Always
  volumes:
  - name: smb
    persistentVolumeClaim:
      claimName: pvc-smb-guest